----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
WebCT Mail/Discussion Board Message Script Insertion

SECUNIA ADVISORY ID:
SA29227

VERIFY ADVISORY:
http://secunia.com/advisories/29227/

CRITICAL:
Less critical

IMPACT:
Cross Site Scripting

WHERE:
>From remote

SOFTWARE:
WebCT Campus Edition 4.x
http://secunia.com/product/3280/

DESCRIPTION:
Benjamin Lupton has reported a vulnerability in WebCT Campus Edition,
which can be exploited by malicious users to conduct script insertion
attacks.

Input passed as mail or discussion board messages with "Don't wrap
text" enabled is not properly sanitised before being stored. This can
be exploited to insert arbitrary HTML and script code, which is
executed in a user's browser session in context of an affected site
when the malicious data is viewed.

Successful exploitation requires that both the attacker and the
victim have valid user credentials.

The vulnerability is reported in version 4.1.5.8. Other versions may
also be affected.

SOLUTION:
Filter malicious characters and character sequences in a web proxy.

PROVIDED AND/OR DISCOVERED BY:
Benjamin "balupton" Lupton

ORIGINAL ADVISORY:
http://www.balupton.com/documents/webct_exploits.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------